Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/391E6EDE679B11E886728650C4F9AE02.roa
File:                     391E6EDE679B11E886728650C4F9AE02.roa (raw, json)
Hash identifier:          FfJi+Cna0JYZDzk+rBUfl7UT75ngYXqfbGnsFnMhnRc=
Subject key identifier:   F6:5E:62:09:5C:04:F4:43:A5:CF:2E:FF:D6:72:91:CE:5F:6F:B8:CE
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       13DE
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/391E6EDE679B11E886728650C4F9AE02.roa
Signing time:             Tue 18 Jun 2024 18:09:22 +0000
ROA not before:           Tue 18 Jun 2024 18:09:22 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     38629
IP address blocks:        138.243.248.0/23 maxlen: 24
                          138.243.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5086 (0x13de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: Jun 18 18:09:22 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6671cd52-8595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:cd:d2:4c:09:96:d6:40:31:83:d0:e4:df:
                    ea:12:96:a1:be:dd:01:6e:7e:4d:97:1e:40:16:04:
                    49:1a:33:a0:91:9b:80:ed:36:c3:30:25:1a:09:62:
                    e6:43:79:b0:7c:42:40:a0:02:d5:ef:1d:4a:88:13:
                    6b:aa:1f:49:b9:b2:4a:de:02:c5:39:5f:5d:6a:05:
                    f5:f0:4d:28:14:77:8a:d2:03:bf:5f:6f:88:bd:7b:
                    2b:c7:a4:01:73:c6:ea:35:9c:8d:33:20:23:e6:d1:
                    cd:dc:23:da:92:d0:91:5f:37:69:67:49:57:21:50:
                    8d:73:84:57:9f:49:9a:fd:17:60:ea:b5:e2:9b:a8:
                    9e:a8:8c:13:1a:6e:c1:a0:61:e3:30:1d:41:50:0d:
                    68:2e:8c:5b:49:29:58:c0:0a:fe:d6:bd:11:76:51:
                    ba:f9:3b:a1:54:0a:41:80:a8:fe:af:d4:8f:f0:29:
                    b3:44:59:12:90:4a:ce:26:92:ed:e7:70:8d:63:0a:
                    bf:a6:31:1f:bc:13:6d:24:da:18:dc:77:3b:f3:ba:
                    2b:b8:4a:22:93:be:4f:c4:95:c0:93:59:ca:23:1b:
                    be:c6:44:b1:76:40:3c:91:4a:45:cc:4e:72:51:5d:
                    ec:dd:76:da:94:47:ac:7e:f7:c0:95:66:5a:5a:b8:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5E:62:09:5C:04:F4:43:A5:CF:2E:FF:D6:72:91:CE:5F:6F:B8:CE
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/391E6EDE679B11E886728650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.243.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:52:4f:5f:e9:1c:c1:d7:f6:71:fd:84:b2:a0:dc:9a:bc:c2:
         a2:fc:dd:88:45:92:75:b5:45:04:eb:ac:00:11:4c:4d:64:1e:
         01:e2:b2:48:26:7c:82:64:9b:b7:b8:26:07:ae:a0:e2:0b:f0:
         bd:97:65:6e:9a:96:56:ab:5b:dd:b1:b6:a7:87:19:96:ab:ca:
         e1:93:9b:61:8f:4f:ef:06:d9:69:98:ba:e7:52:17:63:13:f2:
         d0:9a:ca:d3:0d:3a:9c:09:18:bb:92:06:80:e0:10:6d:53:7f:
         02:63:e7:3b:c7:ad:04:d7:f6:22:ca:0a:fc:3c:ee:5e:1d:05:
         54:df:99:07:85:fd:b3:d9:24:1d:3a:89:ca:b8:58:51:77:9c:
         41:d1:f2:36:52:ff:cc:34:a0:eb:7a:26:75:1b:db:38:3b:a8:
         a8:e2:13:1b:01:9c:2f:08:f4:2b:5c:ea:e4:0e:38:c5:20:f3:
         cf:ed:5b:5f:56:9a:03:0e:27:fa:3b:6b:d6:f4:b4:23:2c:7d:
         16:d8:f0:27:30:62:88:4d:ab:95:3a:43:38:63:39:94:3c:e4:
         97:64:74:7f:be:72:9d:36:75:df:8b:e3:75:f0:5e:f5:c4:c1:
         0b:1a:9c:62:a4:63:08:0a:71:63:7e:f4:54:48:6f:b4:21:52:
         74:a3:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:09 2024 by rpki-client on console-ams.rpki-client.org